Systems Architect – MDR Services

Remote, Spain
Engineering /
Regular Full Time /
Remote
Enter the exciting world of cybersecurity.  WatchGuard has been protecting businesses against cyber criminals, malware, adware, spam, and accidental exposures for over 25 years.  Every one of us depend on the internet for information, communication, e-commerce, and entertainment. WatchGuard has and will continue to develop solutions to combat ever changing cyber-threats.  Join WatchGuard in this fight to keep our customer’s safe from the perils of the internet.
 
About the Position
The WatchGuard SOC, operated by seasoned cybersecurity experts armed with security analytics, industry-leading machine learning/AI, and threat intelligence, keeps our MSP customers safe. The team constantly monitors, hunts, detects, and contains threats lurking in their endpoints and networks around the clock while assessing their attack surface to strengthen security posture and improve their resiliency to threats.
The SOC Architect position will play a key role in expanding WatchGuard’s new Managed Detection and Response (MDR) service that is backed by our SOC team.
 
We are seeking an experienced System Architect with strong background in designing Security Operations Center (SOC) and other managed services infrastructures. As a key member of our team, you will play a critical role in designing, implementing, and maintaining robust infrastructure to facilitate our SOC Analysts & Threat Hunters giving an excellent, scalable, and efficient MDR service.
 
This role will report directly to the Director of WG Labs, and will work very closely with the SOC manager, people from the product area such as Market Owners, Project Managers, Product Owners, etc., and the engineering managers of the different platforms and systems that serve the SOC business.
The ideal candidate must have an excellent knowledge of modern technologies, be able to think out of the box, view the global picture to accommodate the product vision with the SOC platform requirements, strategic thinking, and have strong communication and interpersonal skills.
 
A day in the life
 
An architect begins their day by reviewing system requirements with stakeholders. This may include meetings with product managers, developers, and other architects to discuss the needs of the system and how they can best be implemented. They then create architectural designs that outline how the system will be built. Once the design has been established, the architect works closely with the developers to ensure that the system is being built according to the design. This can include reviewing the code and mentoring developers to help them understand the architecture.
 
Throughout the day, architects may face technical challenges that require innovative solutions. This may involve identifying and resolving performance issues, ensuring system reliability, and implementing security measures. A crucial aspect of their role is communication. They must be able to clearly explain their design decisions to stakeholders and work effectively with team members to implement these decisions.
 
The field of technology is constantly evolving, so as an architect, you must keep up with the latest trends and emerging technologies. This may involve reading industry publications, attending conferences, and conducting independent research.
 
In addition to day-to-day tasks, a Software Systems Architect must also think strategically about the future of the system. This may involve planning for future iterations of the system and considering how current design decisions will affect the system in the future.
 
This role requires a combination of technical expertise, communication skills, and strategic thinking. It’s a challenging but rewarding role that has a significant impact on the success of MDR services.

Position Responsibilities

    • Meet with stakeholders to gather requirements for upcoming projects/initiatives.
    • Collaborate with cross-functional teams to design and implement secure and scalable systems architecture for our SOC.
    • Develop architectural blueprints, ensuring alignment with security best practices, compliance requirements, and business objectives.
    • Product Specifications: Develop high-level product specifications identified by Market Owner, paying attention to system integration and feasibility.
    • Assist in the development of policies and best practices related to technology, workflows, and coding standards.
    • Identify inefficiencies in technical workflows and recommend innovative solutions to address these issues.
    • Technical Guidance: Provide technical guidance to developers and engineers.
    • Identify inefficiencies in technical workflows and recommend innovative solutions to address these issues.
    • Quality Assurance: Ensure the software meets all quality, security, compliance, modifiability, and scalability requirements.
    • Assist in defining key metrics for measuring success of our ongoing support of key stakeholders and their related systems and processes.

Requirements

    • Proven experience as a software architect.
    • Excellent communication and leadership skills.
    • Experience in software development and coding across various languages (C#, .NET, Java, etc.).
    • Excellent knowledge of software and application design and architecture (Microservices, Containers, Cloud based infrastructures (AWS, Azure), CD/CI).
    • In-depth knowledge and experience of managed detection and response involving cloud services and cloud computing, particularly Microsoft 365. 
    • Solid knowledge of SOC-related technologies, including:
    • IEM (Security Information and Event Management): Familiarity with tools like Splunk, ArcSight, QRadar, etc.
    • IDS/IPS (Intrusion Detection/Prevention Systems): Understanding of how they work and how to integrate them into the architecture.
    • Firewalls and Gateways: Knowledge of perimeter security solutions.
    • Endpoint Security: Experience with security solutions on end devices.
    • Identity and Access Management (IAM): Familiarity with authentication and authorization systems.
    • Security Automation and Orchestration: Knowledge of tools like Ansible, Puppet, etc.
    • Fluent in Spanish and English.